CVE-2026-29192

ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via Default URI Redirect. This issue has been patched in version 4.12.0.

Score

CVSS 3.1 7.7 High

Status

Analyzed - security-advisories@github.com

Published

2026-03-07

Last modified

2026-03-09

Weaknesses

CWE-79

Affected products

• Zitadel (Zitadel)

References

• https://github.com/zitadel/zitadel/security/advisories/GHSA-6rx5-m2rc-hmf7